Data the app does not collect
No account profile, advertising identifier, analytics event, crash upload, update check, or remote font request. There is no server-side vault, credential store, or recovery copy.
Privacy
No account. No telemetry. No hidden network path.
The production runtime is designed to work without network access. Cascade Vault does not send files, filenames, passwords, diagnostics, usage events, or analytics anywhere.
Data that stays on your device
Small non-sensitive preferences such as appearance and calibrated Argon2 parameters may be stored locally. Recent paths and passwords are not persisted by Cascade Vault.
Operating-system traces
File paths can appear in system recent-item databases, indexing, backups, snapshots, cloud-sync histories, antivirus logs, swap, and hibernation. Cascade Vault cannot erase those external traces.
Notifications and clipboard
Optional completion notifications are generic and contain no operation type, filename, path, or vault identifier. Avoid copying passwords through a clipboard watched by other software.
Plain-language promise
If the app does not need the network, it should not use the network.
The repository enforces that policy against production project references and compiled metadata. The public website is separate from the offline desktop runtime.